Container Basics On Linux (Namespaces/Cgroups)

Stop feeling blind when debugging container cgroups

🧩 The Challenge

You ever look at a container process hogging CPU and try to figure out which specific cgroup is actually pinning it? Most people just stare at top and give up because the path names in the kernel aren’t exactly helpful.

💡 The Fix

Use systemd-cgtop to see exactly how your slices are behaving in real-time. It beats guessing which PID belongs to which service when the system is under load.

systemd-cgtop

⚙️ Why It Works

This utility hooks directly into the cgroup hierarchy managed by systemd, mapping those messy kernel structures to the actual service names you recognize. It’s way cleaner than digging through /sys/fs/cgroup manually when you’re in a panic.

🚀 Pro-Tip: Pipe it to grep if you’ve got a massive pile of containers and need to narrow down the noise.

Linux Tips & Tricks | © ngelinux.com | 8/28/2026